-
Bug
-
Resolution: Done
-
Undefined
-
None
-
4.18.0
-
None
-
False
-
Description of problem:
ABI install of 4.18.ec4 (and rc0) fail when rendezvous host can not verify TLS cert on MachineConfigServer endpoint.
Version-Release number of selected component (if applicable):
4.18.0-rc.0
How reproducible:
Install of rc0 fails every time for me. Same configs.
Steps to Reproduce:
1. Download openshift-install for 4.18.rc0 2. Generate agent ISO 3. Attach to the VMs being used as nodes 4. Boot nodes 5. Wait for failure when final node attempts to join cluster
Actual results:
Nodes master-2 and master-3 join cluster. Node master-1 (rendezvous host) reboots. Node master-1 connects to MCS and throws a TLS verification error indefinitely: -- ignitionI1188]: GET https://192.168.4.19:22623/config/master: attempt #4 ignition[1188]: GET error: Get "https://192.168.4.19:22623/config/master": tls: failed to verify certificate: x509 certificate signed by unknown authority
Expected results:
Rendezvous host successfully downloads machine config and becomes a node.
Additional info:
ABI install of 4.18.ec3 with same configs works fine.
Discussion in #form-ocp-agent:
https://redhat-internal.slack.com/archives/C02SPBZ4GPR/p1733429661563539